Hi, i jave installed gzip with file from cpanel net, all apears to be working, gzip log being written and lekno.com report it as being installed but not compressing files, which logs confirm except files those files that are IIS worm scans, see gzip log extract below.
I do use an entry below in my .htaccess files so these worm entries do not force use of error pages, but even with this removed gzip still will not work.
I have tried commenting out some of the modules but still no luck, the answer seems to lie with this log entry but i can not find any ref to it anywhere.
127.0.0.1 - - [28/Feb/2002:17:24:06 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
I did try downloading source from remotecom site and compiling it, but apache would not run at all with version.
some help really appriciated here
---------start .htaccess--------
redirect /scripts http://www.stoptheviruscold.invalid
redirect /MSADC http://www.stoptheviruscold.invalid
redirect /c http://www.stoptheviruscold.invalid
redirect /d http://www.stoptheviruscold.invalid
redirect /_mem_bin http://stoptheviruscold.invalid
redirect /msadc http://stoptheviruscold.invalid
RedirectMatch (.*)\cmd.exe$ http://stoptheviruscold.invalid$1
---------end .htaccess----------
httpd.conf extracts
-------start------
# Note: The order in which modules are loaded is important. Don't change
# the order below without expert advice.
#
# Example:
# LoadModule foo_module libexec/mod_foo.so
LoadModule rewrite_module libexec/mod_rewrite.so
LoadModule bytes_log_module libexec/mod_log_bytes.so
LoadModule php4_module libexec/libphp4.so
LoadModule bwlimited_module libexec/mod_bwlimited.so
LoadModule jk_module libexec/mod_jk.so
LoadModule gzip_module libexec/mod_gzip.so
# Reconstruction of the complete module list from all available modules
# (static and shared ones) to achieve correct module execution order.
# [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
ClearModuleList
AddModule mod_env.c
AddModule mod_log_config.c
AddModule mod_mime.c
AddModule mod_negotiation.c
AddModule mod_status.c
AddModule mod_include.c
AddModule mod_autoindex.c
AddModule mod_dir.c
AddModule mod_cgi.c
AddModule mod_asis.c
AddModule mod_imap.c
AddModule mod_actions.c
AddModule mod_userdir.c
AddModule mod_alias.c
AddModule mod_rewrite.c
AddModule mod_access.c
AddModule mod_auth.c
AddModule mod_so.c
AddModule mod_setenvif.c
&IfDefine SSL&
AddModule mod_ssl.c
&/IfDefine&
AddModule mod_frontpage.c
AddModule mod_log_bytes.c
AddModule mod_php4.c
AddModule mod_bwlimited.c
AddModule mod_jk.c
AddModule mod_gzip.c
---further on ---------
&IfModule mod_gzip.c&
mod_gzip_on yes
mod_gzip_dechunk yes
mod_gzip_keep_workfiles No
mod_gzip_temp_dir /tmp
mod_gzip_minimum_file_size 300
mod_gzip_maximum_file_size 0
mod_gzip_maximum_inmem_size 1000000
mod_gzip_item_include file \.htm$
mod_gzip_item_include file \.html$
mod_gzip_item_include file \.shtml$
mod_gzip_item_include file \.shtm$
mod_gzip_item_include file \.jsp$
mod_gzip_item_include file \.php$
mod_gzip_item_include file \.php3$
mod_gzip_item_include file \.pl$
mod_gzip_item_include file \.cgi$
mod_gzip_item_include mime text/.*
mod_gzip_item_include mime &jserv-servlet&
mod_gzip_item_include handler &jserv-servlet&
mod_gzip_item_include mime &application/x-httpd-php.*&
mod_gzip_item_include mime httpd/unix-directory
mod_gzip_item_exclude file &\.css$&
mod_gzip_item_exclude file &\.js$&
mod_gzip_item_exclude file &\.wml$&
mod_gzip_item_exclude file authorizationRequired.shtml
mod_gzip_item_exclude file fileNotFound.shtml
mod_gzip_item_exclude file internalServerError.shtml
mod_gzip_item_exclude file forbidden.shtml
&/IfModule&
start gzip logs--- ip changed---
127.0.0.1 - - [04/Feb/2002:16:17:21 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:25:41 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:34:05 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:42:25 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:50:45 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
64.7.145.109 - - [04/Feb/2002:16:56:46 +0000] &server.domain.net €&^A^C& 501 - mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Out:0:0pct.
127.0.0.1 - - [04/Feb/2002:16:59:05 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:17:07:26 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:17:15:46 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
250.177.21.10 - - [04/Feb/2002:17:16:36 +0000] &server.domain.net €+^A^C& 501 - mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Out:0:0pc$
127.0.0.1 - - [04/Feb/2002:17:24:06 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
77.74.16.127 - - [04/Feb/2002:17:27:04 +0000] &server.domain.net GET /scripts/root.exe?/c+dir HTTP/1.0& 404 - mod_gzip: DECLINED:$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /MSADC/root.exe?/c+dir HTTP/1.0& 404 - mod_gzip: DECLINED:NO$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0& 404 - mod_gzip: D$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0& 404 - mod_gzip: D$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
77.74.16.127 - - [04/Feb/2002:17:27:06 +0000] &server.domain.net GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.e$
77.74.16.127 - - [04/Feb/2002:17:27:06 +0000] &server.domain.net GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.e$
77.74.16.127 - - [04/Feb/2002:17:27:07 +0000] &server.domain.net GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%$
77.74.16.127 - - [04/Feb/2002:17:27:07 +0000] &server.domain.net GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:12 +0000] &server.domain.net GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0&$
77.74.16.127 - - [04/Feb/2002:17:27:12 +0000] &server.domain.net GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
77.74.16.127 - - [04/Feb/2002:17:27:13 +0000] &server.domain.net GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.$
77.74.16.127 - - [04/Feb/2002:17:27:13 +0000] &server.domain.net GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
I do use an entry below in my .htaccess files so these worm entries do not force use of error pages, but even with this removed gzip still will not work.
I have tried commenting out some of the modules but still no luck, the answer seems to lie with this log entry but i can not find any ref to it anywhere.
127.0.0.1 - - [28/Feb/2002:17:24:06 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
I did try downloading source from remotecom site and compiling it, but apache would not run at all with version.
some help really appriciated here
---------start .htaccess--------
redirect /scripts http://www.stoptheviruscold.invalid
redirect /MSADC http://www.stoptheviruscold.invalid
redirect /c http://www.stoptheviruscold.invalid
redirect /d http://www.stoptheviruscold.invalid
redirect /_mem_bin http://stoptheviruscold.invalid
redirect /msadc http://stoptheviruscold.invalid
RedirectMatch (.*)\cmd.exe$ http://stoptheviruscold.invalid$1
---------end .htaccess----------
httpd.conf extracts
-------start------
# Note: The order in which modules are loaded is important. Don't change
# the order below without expert advice.
#
# Example:
# LoadModule foo_module libexec/mod_foo.so
LoadModule rewrite_module libexec/mod_rewrite.so
LoadModule bytes_log_module libexec/mod_log_bytes.so
LoadModule php4_module libexec/libphp4.so
LoadModule bwlimited_module libexec/mod_bwlimited.so
LoadModule jk_module libexec/mod_jk.so
LoadModule gzip_module libexec/mod_gzip.so
# Reconstruction of the complete module list from all available modules
# (static and shared ones) to achieve correct module execution order.
# [WHENEVER YOU CHANGE THE LOADMODULE SECTION ABOVE UPDATE THIS, TOO]
ClearModuleList
AddModule mod_env.c
AddModule mod_log_config.c
AddModule mod_mime.c
AddModule mod_negotiation.c
AddModule mod_status.c
AddModule mod_include.c
AddModule mod_autoindex.c
AddModule mod_dir.c
AddModule mod_cgi.c
AddModule mod_asis.c
AddModule mod_imap.c
AddModule mod_actions.c
AddModule mod_userdir.c
AddModule mod_alias.c
AddModule mod_rewrite.c
AddModule mod_access.c
AddModule mod_auth.c
AddModule mod_so.c
AddModule mod_setenvif.c
&IfDefine SSL&
AddModule mod_ssl.c
&/IfDefine&
AddModule mod_frontpage.c
AddModule mod_log_bytes.c
AddModule mod_php4.c
AddModule mod_bwlimited.c
AddModule mod_jk.c
AddModule mod_gzip.c
---further on ---------
&IfModule mod_gzip.c&
mod_gzip_on yes
mod_gzip_dechunk yes
mod_gzip_keep_workfiles No
mod_gzip_temp_dir /tmp
mod_gzip_minimum_file_size 300
mod_gzip_maximum_file_size 0
mod_gzip_maximum_inmem_size 1000000
mod_gzip_item_include file \.htm$
mod_gzip_item_include file \.html$
mod_gzip_item_include file \.shtml$
mod_gzip_item_include file \.shtm$
mod_gzip_item_include file \.jsp$
mod_gzip_item_include file \.php$
mod_gzip_item_include file \.php3$
mod_gzip_item_include file \.pl$
mod_gzip_item_include file \.cgi$
mod_gzip_item_include mime text/.*
mod_gzip_item_include mime &jserv-servlet&
mod_gzip_item_include handler &jserv-servlet&
mod_gzip_item_include mime &application/x-httpd-php.*&
mod_gzip_item_include mime httpd/unix-directory
mod_gzip_item_exclude file &\.css$&
mod_gzip_item_exclude file &\.js$&
mod_gzip_item_exclude file &\.wml$&
mod_gzip_item_exclude file authorizationRequired.shtml
mod_gzip_item_exclude file fileNotFound.shtml
mod_gzip_item_exclude file internalServerError.shtml
mod_gzip_item_exclude file forbidden.shtml
&/IfModule&
start gzip logs--- ip changed---
127.0.0.1 - - [04/Feb/2002:16:17:21 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:25:41 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:34:05 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:42:25 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:16:50:45 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
64.7.145.109 - - [04/Feb/2002:16:56:46 +0000] &server.domain.net €&^A^C& 501 - mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Out:0:0pct.
127.0.0.1 - - [04/Feb/2002:16:59:05 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:17:07:26 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
127.0.0.1 - - [04/Feb/2002:17:15:46 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
250.177.21.10 - - [04/Feb/2002:17:16:36 +0000] &server.domain.net €+^A^C& 501 - mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Out:0:0pc$
127.0.0.1 - - [04/Feb/2002:17:24:06 +0000] &server.domain.net GET / HTTP/1.0& 200 2673 mod_gzip: DECLINED:UNHANDLED_SUBREQ In:0Ou$
77.74.16.127 - - [04/Feb/2002:17:27:04 +0000] &server.domain.net GET /scripts/root.exe?/c+dir HTTP/1.0& 404 - mod_gzip: DECLINED:$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /MSADC/root.exe?/c+dir HTTP/1.0& 404 - mod_gzip: DECLINED:NO$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0& 404 - mod_gzip: D$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0& 404 - mod_gzip: D$
77.74.16.127 - - [04/Feb/2002:17:27:05 +0000] &server.domain.net GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
77.74.16.127 - - [04/Feb/2002:17:27:06 +0000] &server.domain.net GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.e$
77.74.16.127 - - [04/Feb/2002:17:27:06 +0000] &server.domain.net GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.e$
77.74.16.127 - - [04/Feb/2002:17:27:07 +0000] &server.domain.net GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%$
77.74.16.127 - - [04/Feb/2002:17:27:07 +0000] &server.domain.net GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:08 +0000] &server.domain.net GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& $
77.74.16.127 - - [04/Feb/2002:17:27:12 +0000] &server.domain.net GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0&$
77.74.16.127 - - [04/Feb/2002:17:27:12 +0000] &server.domain.net GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
77.74.16.127 - - [04/Feb/2002:17:27:13 +0000] &server.domain.net GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.$
77.74.16.127 - - [04/Feb/2002:17:27:13 +0000] &server.domain.net GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0& 4$
